Seems there's an interesting tool which can be used for analyzing AVC denials: * https://github.com/pranlawate/avc-parser Might be worth integrating it with the `avc` test check to provide users with more instructive / informative output about the identified failures.